Vulnerability Development mailing list archives

Re: CR II - winME? confirmation? (Slightly OT)


From: "Gregory McCann" <cambria () owt com>
Date: Tue, 07 Aug 2001 18:28:20 -0700

On 8/7/2001 at 4:55 PM Amer Karim wrote:

I just came across a situation today where one of my clients
asked me to have a look at his home system since it was behaving rather
strangely.  Found out he was running W2K Pro w/ IIS installed (had a site
running w/ pics of his family), and when I asked him if he’d patched it for
the original CR he just gave a blank look – followed by “I though that was
only for servers.” …I just about put my head through the wall.

Hard to blame him when even the SecurityFocus web site says of CR2, "only web servers are vulnerable -- home PC users 
are generally immune".

http://www.securityfocus.com/news/232


Greg


Current thread: